Ensure MachineKey validation method - .Net 4.5 is configured
The machineKey
element of the ASP.NET web.config
specifies the algorithm and keys that ASP.NET will use for encryption. The Machine Key
feature can be managed to specify hashing and encryption settings for application services
such as view state, Forms authentication, membership and roles, and anonymous
identification.
Machine key encryption can be set by using the UI, running appcmd.exe commands, by editing configuration files directly, or by writing WMI scripts. To set the Machine Key encryption at the global level using an appcmd.exe command.
%systemroot%\system32\inetsrv\appcmd set config /commit:WEBROOT /section:machineKey /validation:HMACSHA25